In a reminder of the risks of data protection breaches, the British Columbia Court of Appeal found last month that an employer can be held responsible when its staff violate the province’s Privacy Act.

As the provider of universal, compulsory motor insurance plans for the province’s residents, the Insurance Corporation of British Columbia (ICBC) has access to the name, address, license number, and vehicle descriptions of all vehicle owners.